Black Duck Software, Inc. helps organizations build secure, high-quality software, minimizing risks while maximizing speed and productivity. Black Duck, a recognized pioneer in application security, provides SAST, SCA, and DAST solutions that enable teams to quickly find and fix vulnerabilities and defects in proprietary code, open source components, and application behavior. With a combination of industry-leading tools, services, and expertise, only Black Duck helps organizations maximize security and quality in DevSecOps and throughout the software development life cycle.
Black Duck maintains the world's largest and most comprehensive knowledge base of open-source software intelligence. Built over two decades, this knowledge base encompasses extensive data on open-source components, vulnerability intelligence, software licensing, and associated metadata. This data powers critical security decisions worldwide and forms the foundation of our industry-leading software composition analysis and AI-powered security solutions.
We are seeking a Senior Data Analyst to ensure the accuracy, completeness, and reliability of the data our customers depend on to secure their software supply chains. You'll investigate anomalies, resolve data quality issues, and work cross-functionally to continuously improve the integrity of our knowledge base.
This role combines open-source intelligence, software security, and data science. The work matters, your contributions directly affect how organizations worldwide secure their software, and you'll help maintain the industry's most comprehensive open-source intelligence resource.
• You'll maintain data quality standards for the industry's most comprehensive open-source knowledge base
• Your work ensures accurate vulnerability intelligence that protects production systems globally
• You'll contribute to the data foundation that powers our next-Generation AI security tools
• You'll be part of a team building and maintaining a strategic competitive advantage that cannot be replicated.
Ideal candidates are detail-oriented problem solvers who thrive in a research-intensive environment, can balance multiple priorities, and understand that data quality is the foundation of trustworthy security intelligence.
Responsibilities:
• Identify and resolve software data quality issues
• Research open-source components, security vulnerabilities, and licensing information to resolve data quality issues
• Respond to and resolve customer queries related to data quality issues
• Proactively maintain and ensure data accuracy according to data quality standards
• Perform software composition analysis scanning for specific issue replication
• Utilize internal tools, develop scripts to create tooling and automated workflows
• Collaborate with engineering, security research, and customer support teams to resolve data quality issues
Skills and Experience:
• Degree in Computer Science, Data Science, Information Systems / related field or proven willingness to learn
• 6+ years’ experience in a data-driven or engineering role.
• Experience with scripting languages (Various: Python /Perl/Java/Ruby etc)
• Strong experience with SQL
• Ability to work independently and as part of a team
• Strong analytical and problem-solving skills
• Excellent written and verbal communication skills
• Ability to manage multiple tasks and deadlines
• Self-directed research skills with ability to investigate unfamiliar software packages, vulnerabilities, and licensing terms
• Exceptional attention to detail
• Recognize when to escalate problems to other teams
• Familiarity with version control and source control systems (e.g., Git)
• Ability to prioritize multiple issues based on urgency and impact
• Experience with process documentation
• Pro-active in self- development and knowledge sharing with the team
Desired Skills & Experience:
• Understanding of software security and vulnerability management
• Knowledge of open-source software and licenses
• Practical GenAI experience / Agentic workflows
• Experience with issue tracking systems (e.g., Jira)
• Familiarity with software composition analysis or application security tools
• Experience working with vulnerability databases (CVE, NVD, etc.)
Black Duck considers all applicants for employment without regard to race, color, religion, sex, gender preference, national origin, age, disability, or status as a Covered Veteran in accordance with federal law. In addition, Black Duck complies with applicable state and local laws prohibiting discrimination in employment in every jurisdiction in which it maintains facilities. Black Duck also provides reasonable accommodation to individuals with a disability in accordance with applicable laws.
